KarenPsycho — Bot and Swap Script

Audit report published Dec 2024. Fuel · Sway, TypeScript.

Findings at a glance

Severity	Count
High	1
Medium	2
Low	1
Total	4

Summary

Safe Edges reviewed the KarenPsycho trading bot and its Sway swap script on Fuel between 24 and 31 December 2024. Four issues were identified: one High, two Medium and one Low. The High issue exposed users' private keys in plaintext logs. The team fixed all four.

Read the full report (PDF).

Findings

High (1)

• H-01 Storing User Private Keys in Plaintext Logs — Resolved

Medium (2)

• M-01 Incorrect amount_out Calculation After Fee Deduction in Sell Function — Resolved
• M-02 No Upper Limit on Fee Percentage — Resolved

Low (1)

• L-01 Missing Validation or Error Message for Invalid Token Address — Resolved

More published reports

Related services

Get a fixed quote in 24 hours

Send the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.